02a6a4e6ae14d1111607ac18ee0a7dbf[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02a6a4e6ae14d1111607ac18ee0a7dbf.bin
Size

4KB
MD5

8f987c2216051f231d3dc7b464dbb96e
SHA1

b67f5bbf84788955e5a18147be420afdaa3b55e9
SHA256

cf42ca5c70f7f8924ec356c2512a52c86dd2007dd63f0ba7f483bc9dadec46b0
SHA512

3aee186d62d9f6a74526f3bc9b3f49fcc2b4bf0ce1f049e7a6824cb066bdf9cf44428ae41d3d7c13e133f5ecfea61c4b179abf440fe2687c3e8ad02a244a0a6f
SSDEEP

96:RdOBQT08/NpsbZScMoiZsL4ybBqE7VqooiNnh:34oNphcMoiBWQE7XNh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/f9e751fefa2a3a7fa13bbbdfd00b4642d38df711a830f3957bbb6945b7736a19.exe

Files

02a6a4e6ae14d1111607ac18ee0a7dbf.bin
.zip

Password: infected
f9e751fefa2a3a7fa13bbbdfd00b4642d38df711a830f3957bbb6945b7736a19.exe
.exe windows:4 windows x64 arch:x64

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\user\source\repos\Runner\Runner\obj\Release\runner.pdb

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ